Senior IT Compliance Engineer

Job Description

Senior IT Compliance Engineer Location: Chennai, India Employment Type: Full‑time Role Summary The Senior IT Compliance & Infrastructure Engineer is a hands‑on senior engineer who designs, secures, and scales the corporate IT environment—Google Workspace, Okta, Jamf, Slack and other SaaS platforms—while ensuring that controls exceed frameworks such as SOC 2, ISO 27001, and PCI DSS. You will be the connective tissue between Infrastructure, Security, and Compliance, owning the full lifecycle of policies, tooling, audits, and automation that support 1,000+ employees across multiple geographies. Key Responsibilities Internal & External Audits Schedule, execute, and document internal controls testing—user activity review, laptop admin‑access review, asset audits, etc. Provide evidence and SME support for external audits (SOC 2, ISO 27001, PCI DSS) and customer due‑diligence requests. Incident & Risk Management Triage and investigate IT compliance/security incidents and DLP alerts; coordinate remediation with stakeholders. Track root causes, document post‑mortems, and drive continuous control improvements. Policy & Process Engineering Develop, document, and continuously improve IT policies, runbooks, and KPIs—leveraging AI and automation wherever possible. Champion the adoption of an “AI‑first” mindset to streamline repetitive tasks and enhance service quality. Tool Lifecycle Management Lead procurement, renewals, and license expansions for corporate IT SaaS tools. Drive license optimisation and cost control; plan and execute tool sunsets in partnership with business owners. End-to-End Management of Corporate IT Tools Own day-to-day administration and the strategic roadmap for Google Workspace, Okta, Jamf, Slack, and other Corporate IT tools—covering configuration, capacity planning, compliance hardening, feature adoption, and continuous improvement. Access Management & Automation Build and maintain automated provisioning/de‑provisioning with Okta Identity Governance, SCIM, and Workflows. Maintain least‑privilege models and execute periodic user‑access and activity reviews. IT Onboarding & Offboarding Orchestrate end‑to‑end onboarding of new joiners, provisioning “birth‑right” access via both manual and automated workflows. Own the exit process—coordinate with HR, Risk and other teams to revoke all access within defined SLAs. Implementation & Integration of New Tools Integrate SSO, SCIM, and access‑request workflows for newly procured tools. Publish self‑service app bundles in Jamf / Jumpcloud. Service Ownership & Team Leadership Coach and develop junior engineers and support analysts, nurturing a security‑first, compliance‑driven culture rooted in continuous learning and curiosity. Required Skills & Experience AI‑first mindset with demonstrable automation experience (Okta Workflows, Google Apps Script, Zapier, Python, JavaScript). 4+ years in corporate IT infrastructure, with 3+ years focused on compliance and security. Minimum 3 years administering Google Workspace and Okta, including advanced SSO/SCIM configurations. Practical expertise with Okta Identity Governance, Okta Workflows and Okta Device Access. At least 1 year managing Jamf Pro or an equivalent MDM for macOS/Windows fleets. Track record implementing and auditing PCI DSS, ISO 27001, and SOC 2 controls across IT systems. Hands‑on experience conducting internal reviews (user activity & access) and managing enterprise DLP programs. Exceptional written & verbal communication skills paired with meticulous documentation abilities; able to translate technical controls for non‑technical stakeholders and produce clear, audit‑ready runbooks, diagrams, and knowledge‑base articles. Nice to Have Software development experience in JavaScript or Python. Certifications such as Okta Certified Administrator/Consultant, Okta Certified Workflows, Associate Google Workspace Administrator. Familiarity with ITIL/ITSM tooling (Freshservice, Jira Service Management) and CMDB practices. Prior experience in a high‑growth, global SaaS environment (1000 + endpoints, multi‑OS). Show more Show less